[Secure-testing-commits] r36701 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Sep 15 20:18:48 UTC 2015


Author: carnil
Date: 2015-09-15 20:18:48 +0000 (Tue, 15 Sep 2015)
New Revision: 36701

Modified:
   data/CVE/list
Log:
Reported bug for mediawiki

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-09-15 20:13:58 UTC (rev 36700)
+++ data/CVE/list	2015-09-15 20:18:48 UTC (rev 36701)
@@ -2246,32 +2246,32 @@
 	NOTE: https://phabricator.wikimedia.org/T103765
 	NOTE: https://phabricator.wikimedia.org/T103765
 CVE-2015-6730 (Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki ...)
-	- mediawiki <unfixed>
+	- mediawiki <unfixed> (bug #799096)
 	[jessie] - mediawiki <no-dsa> (Minor issues)
 	[wheezy] - mediawiki <no-dsa> (Minor issues)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://phabricator.wikimedia.org/T97391
 CVE-2015-6729 (Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki ...)
-	- mediawiki <unfixed>
+	- mediawiki <unfixed> (bug #799096)
 	[jessie] - mediawiki <no-dsa> (Minor issues)
 	[wheezy] - mediawiki <no-dsa> (Minor issues)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://phabricator.wikimedia.org/T97391
 CVE-2015-6728 (The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, ...)
-	- mediawiki <unfixed>
+	- mediawiki <unfixed> (bug #799096)
 	[jessie] - mediawiki <no-dsa> (Minor issues)
 	[wheezy] - mediawiki <no-dsa> (Minor issues)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://phabricator.wikimedia.org/T94116
 CVE-2013-7444 (The Special:Contributions page in MediaWiki before 1.22.0 allows ...)
-	- mediawiki <unfixed>
+	- mediawiki <unfixed> (bug #799096)
 	[jessie] - mediawiki <no-dsa> (Minor issues)
 	[wheezy] - mediawiki <no-dsa> (Minor issues)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)
 	NOTE: https://phabricator.wikimedia.org/T106893
 	NOTE: https://github.com/wikimedia/mediawiki/commit/dc2966bd05b69321300c63fd0bd78e7c78ecea6e
 CVE-2015-6727 (The Special:DeletedContributions page in MediaWiki before 1.23.10, ...)
-	- mediawiki <unfixed>
+	- mediawiki <unfixed> (bug #799096)
 	[jessie] - mediawiki <no-dsa> (Minor issues)
 	[wheezy] - mediawiki <no-dsa> (Minor issues)
 	[squeeze] - mediawiki <end-of-life> (Not supported in Squeeze LTS)




More information about the Secure-testing-commits mailing list